Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/effacbfc-fa21-3ecb-8779-b57d8a3e4cb0.roa
File:                     effacbfc-fa21-3ecb-8779-b57d8a3e4cb0.roa (raw, json)
Hash identifier:          We/v7HaBjsWgDIxTllzZfG6DeiCn9EeXVBOoeznJpGc=
Subject key identifier:   C2:00:95:3A:37:12:7F:00:2D:7E:B9:21:85:D6:15:16:DE:73:A9:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1D8689D47EC02EECE660
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/effacbfc-fa21-3ecb-8779-b57d8a3e4cb0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.83.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1d:86:89:d4:7e:c0:2e:ec:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=beb27f20-787a-4d92-ac6b-872edf805710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:b3:58:5b:3b:80:c3:5f:43:de:c7:ae:28:
                    4d:06:c1:f6:64:76:bb:61:ba:97:e4:23:14:8a:82:
                    e8:58:21:5e:50:7e:e1:d5:65:7d:8c:87:57:79:21:
                    77:47:68:1e:c2:63:77:1e:39:bb:90:83:30:d0:79:
                    4c:70:48:b1:37:e9:3c:20:2c:00:e5:ae:bc:6a:c5:
                    d0:10:2b:72:07:1d:7d:81:ac:4d:92:8a:af:24:90:
                    3b:39:58:3d:e2:c7:66:a0:b5:60:e4:f7:46:a5:49:
                    63:f0:01:98:b5:9f:0b:ed:8f:51:10:8a:19:1d:83:
                    b4:7e:93:9d:70:54:25:d4:6e:29:88:18:ab:3a:2d:
                    db:0c:15:1a:94:09:80:e0:f3:4e:ec:9e:27:89:c5:
                    06:9e:36:7c:f5:06:23:89:c0:21:41:86:dc:c5:a3:
                    a3:7d:a8:ea:95:3e:31:b4:00:3a:63:4a:7a:84:06:
                    24:bf:4b:a2:af:3a:1e:dd:e7:25:83:10:4d:2d:50:
                    75:5d:14:1c:74:db:a0:93:6a:c9:f3:1c:4d:61:bb:
                    53:f7:c3:00:f4:43:51:cb:d4:47:4b:c9:e0:fe:6e:
                    c4:b8:96:c9:6f:73:71:06:9d:48:69:ed:36:27:0f:
                    03:b5:7c:0f:6a:a3:bf:6a:c8:be:ff:43:58:ff:7e:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:00:95:3A:37:12:7F:00:2D:7E:B9:21:85:D6:15:16:DE:73:A9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/effacbfc-fa21-3ecb-8779-b57d8a3e4cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:eb:b8:f2:81:1e:11:56:c2:5e:38:b0:8f:f5:18:83:80:
         ac:48:05:ce:8e:72:9a:62:ec:62:4a:14:fe:b7:0a:eb:92:06:
         dd:02:f1:6c:96:20:93:7b:8b:7e:0b:ed:8f:7d:e7:15:a9:53:
         43:b3:63:a7:e4:ae:3c:73:4d:81:ca:3d:48:37:3e:0d:a9:d2:
         23:04:17:a7:81:24:c0:82:c7:58:16:08:b2:4b:30:dc:53:76:
         2c:b0:91:f1:5a:38:d7:17:dc:8e:4b:d7:d8:82:ca:d9:32:f4:
         7c:78:10:21:97:9c:fd:fa:27:60:76:ae:c1:34:b1:7a:be:62:
         f8:48:40:7c:3d:0b:6a:40:1b:75:98:ae:cf:61:c2:21:a5:45:
         f2:60:de:84:24:66:99:8c:00:57:d1:a8:e3:0f:62:77:01:22:
         8f:66:b4:10:cc:e8:cd:5d:29:01:be:99:82:8a:50:85:e0:2b:
         fb:5f:68:bd:38:1e:be:88:9a:4c:1c:b1:d1:c1:2e:4f:c1:1c:
         b8:f9:f1:0d:c7:87:1a:d0:69:c4:d4:d8:d1:1e:47:24:fd:5c:
         d6:35:d1:d8:32:9f:f7:e5:cf:57:8a:b0:57:36:35:65:5a:e4:
         c9:c9:ca:34:8b:1e:22:bb:64:9f:7c:8a:cf:fd:2d:30:28:22:
         74:0d:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:07 2025 by rpki-client